WP Manifestindependent plugin directory

Security

Hardening, firewalls, login protection, scanning, 2FA.

1,266 repositories, including 973 with fewer than two releases. Show released plugins only

421

Make it possible to use BankID for login and signature

by Martin Fors no releases pushed 14d ago
★ 1
422

[READ ONLY] OAuth server for WordPress MCP

by WP Elevator no releases pushed 12d ago ↻ updates itself
★ 1
423

A WordPress plugin that automatically adds cryptographic nonces to every script & stylesheet, lets you hash-lock inline code, and builds a bullet-proof Content Security Policy in one click. See readme.txt for full…

by Awhadi no releases pushed 4mo ago
★ 1
424

Aegis Day0 es un plugin de seguridad para WordPress diseñado para detectar vulnerabilidades día 0 en otros plugins instalados. Combina análisis estático de código, integración con WPScan y un sistema de alertas…

by YGB no releases pushed 1mo ago
★ 1
425

Advanced security auditing plugin for WordPress that detects indicators of compromise (IOCs), flags obfuscated backdoors, audits crons, users, drop-in files, database content, and maintains a tamper-evident audit log with quarantine vault.

by theaashishpathak no releases pushed 1mo ago
★ 1
426

Hotfix for file deletion to to code execution vulnerability in WordPress

by Bloom User Experience no releases pushed 4 years ago
★ 0132
427

WordPress plugin for WAB scam protection, comment filtering, and affiliate link fairness — Powered by WAB (webagentbridge.com)

by Web Agent Bridge no releases pushed 6mo ago
★ 1
428

Wordpress 安全防护插件

by summer no releases pushed 6mo ago
★ 1
429
by ovos media gmbh v1.0.0 · 7d ago
★ 01
430

Plugin για το WordPress που αποτρέπει τη δημιουργία νέων λογαριασμών χρηστών — ακόμα και σε επίπεδο βάσης δεδομένων, μέσω SQL triggers, ώστε η προστασία να ισχύει και για κώδικα που παρακάμπτει το…

by Computer Studio v1 · 1mo ago
★ 01
431

Комплексная защита WordPress: WAF, сканер вирусов, капча Яндекс/Google, 2FA, геоблокировка, уведомления и статистика

by Усачёв Денис v3.0.0 · 1mo ago ↻ updates itself
★ 01
432

WordPress hardening plugin: hides fingerprints and blocks user enumeration without breaking the site

by Kharim Mchatta v2.8.5 · 16d ago
★ 01
433

A one-off, read-only review of the files of a WordPress site. It compares the core files with the official checksums of your version, lists what sits in the root and is not…

by Fernando Tellado 1.0.0 · 13d ago
★ 01
434

Spam and abuse protection for Contact Form 7: honeypot, fill-time analysis, rate limits, SQLi and XSS signatures, AbuseIPDB reputation and LLM classification across 11 providers.

by Mikhail Deynekin v4.1.1 · 10d ago
★ 01
435

FGR 2FA – Zwei-Faktor-Authentifizierung für WordPress (TOTP, E-Mail, Backup-Codes)

by Freie Gestalterische Republik v1.0.17 · 1mo ago ↻ updates itself
★ 01
436

Cloudflare Access WP IAM is a WordPress IAM/SSO gateway for securing WordPress admin panels with Cloudflare Access and enterprise identity providers such as Okta, Google Workspace, and Microsoft Entra ID

by IAM Lab v1.2.1 · 5mo ago
★ 01
437

Emails a user when their account is signed in to from a device WordPress has not seen before, and shows the sessions WordPress already records so a single one can be ended.

by George Vasiliades v1.0.0 · 2mo ago
★ 01
438

WordPress login through Cloudflare Zero Trust (Access) over OIDC. One-click provisioning of the Access app, Cloudflare-only or side-by-side login, group-to-role mapping, backup codes.

by GDWS v2.1.1 · 1d ago
★ 06
439

Ten independent WordPress hardening switches on one native settings page. No scanner, no firewall, no bundled extras.

by George Vasiliades v1.0.0 · 2mo ago
★ 01
440

Lightweight WordPress activity history and audit log with dashboard summary, filters, CSV export, retention controls and privacy-focused tracking.

by Khairul Azhar v1.1 · 26d ago ↻ updates itself
★ 01
441

GRS Security - plugin WordPress di GRS Digital. Aggiornamenti distribuiti tramite GitHub Releases.

by GRS Digital 1.3.0 · 7d ago
★ 01
442

Safely change your WordPress username to harden security or update your login handle without database scripts.

by Kevin Ocasio v1.0.0 · 1mo ago
★ 01
443

Removes the WordPress version number from your website source code, feeds, and asset URLs for enhanced security.

by Kevin Ocasio v1.0.0 · 1mo ago
★ 01
444

Plugin WordPress : détecte et nettoie les liens masqués injectés en base de données (spam SEO), avec alerte au tableau de bord et nettoyage réversible.

by Wadie Aroua v1.0.3 · 3mo ago
★ 01
445

WordPress proof-of-work protection for resource-intensive pages and forms

by lostact v2.2.0 · 2mo ago
★ 01
446

Protects your site from automated brute-force attacks by limiting the number of failed login attempts from a single IP address.

by Kevin Ocasio v1.0.0 · 1mo ago
★ 01
447

Blocks the XML-RPC endpoint to protect your website against brute-force login attacks and pingback exploits.

by Kevin Ocasio v1.0.0 · 1mo ago
★ 01
448

Production-grade math CAPTCHA plugin for WordPress with OOP architecture. Adds math CAPTCHA to login, registration, password reset, WooCommerce, Contact Form 7, Elementor forms, and REST API protection.

by Redowan Ahmed v1.0.1 · 6mo ago
★ 01
449

A comprehensive WordPress security hardening plugin. Disables unnecessary features, hardens HTTP headers, protects login, and provides WP-CLI security audit commands.

by Sorin Narcis Gheorghita (goldenlobster) no releases pushed 7mo ago
★ 1
450

FizWatch WordPress plugin — monitor plugin lifecycle events and available updates

by FizTeq Solutions no releases pushed 7mo ago
★ 1